Preparing for Microsoft Early Access Setup
To make sure your early access setup call goes smoothly, you’ll need to confirm that your Microsoft and Pax8 accounts have the right permissions and relationships in place.
This guide will walk you through how to:
-
Verify that your Microsoft Partner Center login has the required permissions
-
Add missing permissions if needed
-
Confirm or create GDAP (Granular Delegated Admin Permissions) relationships
-
Verify your Pax8 account has administrative access
1. Verify your Microsoft Partner Center permissions
You’ll need a Microsoft account with Admin Agent or Global Admin permissions to connect to Gradient.
To check your permissions:
-
Go to the Microsoft Partner Center
-
Sign in using the account you plan to use for Gradient.
-
In the left-hand menu, select Settings → User management.
-
Locate your user profile in the list.
-
Check the Roles and permissions column.
-
If you see Admin agent or Global admin, you’re good to go.
-
If you only see Sales agent, Helpdesk agent, or no role listed, you’ll need to add permissions (see below).
-
To add Admin Agent permissions (if needed):
-
An existing Global admin or Admin agent in your Partner Center can do this for you.
-
Have them open User management, select your user, and choose Update roles.
-
Check Admin agent under Delegated admin privileges.
-
Click Save.
-
Log out and back in to ensure the new role is active.
2. Confirm your GDAP relationships
Gradient requires GDAP (Granular Delegated Admin Permissions) to access customer data securely.
To check your GDAP relationships:
-
Go to Microsoft Partner Center
-
In the left menu, navigate to Customer relationships → Granular delegated admin relationships.
-
Review the list of customers:
-
If you see each of your customer tenants listed with an Active GDAP relationship, you’re good.
-
If you don’t see your customers listed or the status shows Expired or Pending, follow the steps below.
- For early access testing, at least one account must have an Active GDAP relationship
-
To create a new GDAP relationship:
-
In the Partner Center, go to Customers → Request a reseller relationship.
-
Click Create a GDAP relationship.
-
Define the roles your organization needs (typically User management administrator, License administrator, and Service support administrator are sufficient for Gradient access).
-
Set the relationship duration (12 months is standard).
-
Click Generate link — this creates an invitation URL.
-
Share the link with your customer — they must accept it in their Microsoft 365 Admin Center.
-
Once accepted, the relationship will show as Active under Granular delegated admin relationships.
For official Microsoft documentation, see Set up GDAP relationships
3. Verify your Pax8 account has admin access
To connect your Pax8 and Microsoft accounts within Gradient, your Pax8 login must have Admin privileges.
To check your Pax8 permissions:
-
Log in to the Pax8 Partner Portal
-
Click your profile icon in the top-right corner and select Admin → User Management (if available).
-
Locate your user account.
-
In the Role column, confirm you are listed as Admin.
If you’re not an admin:
-
Contact your organization’s Pax8 admin.
-
Ask them to go to User Management → Select your account → Edit Role.
-
Change your role to Admin and click Save.
If your organization only has one Pax8 admin and they’re not available, contact Pax8 Support to have them assist with adding permissions.